Cysic has suspended its cross-chain bridge after an attacker minted 10 million unauthorized $CYS on #BNB Smart Chain on October 17. In its October 18 incident report, the project said an attacker accessed a database supporting the bridge and exploited a processing flaw to submit forged minting messages. The bridge remains paused while investigators review the breach.
Cysic blacklisted an address holding approximately 2.8 million of the newly minted tokens. That does not establish what happened to the other 7.2 million, or whether they were sold. The project says its mainnet and existing assets in user wallets were not compromised, but it has not confirmed a final dollar loss.
The team has engaged an external security firm to trace transfers and investigate the vulnerability. Unauthorized token issuance is different from the theft of existing wallet balances, but it can still affect circulating supply.
Cysic blacklisted an address holding approximately 2.8 million of the newly minted tokens. That does not establish what happened to the other 7.2 million, or whether they were sold. The project says its mainnet and existing assets in user wallets were not compromised, but it has not confirmed a final dollar loss.
The team has engaged an external security firm to trace transfers and investigate the vulnerability. Unauthorized token issuance is different from the theft of existing wallet balances, but it can still affect circulating supply.